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Abstract —The issue of security has become ever more preva¬ 
lent in the analysis and design of cyber-physical systems. In 
this paper, we analyze a consensus network in the presence 
of Denial-of-Service (DoS) attacks, namely attacks that prevent 
communication among the network agents. By introducing a 
notion of Persistency-of-Communication (PoC), we provide a 
characterization of DoS frequency and duration such that con¬ 
sensus is not destroyed. An example is given to substantiate the 
analysis. 

I. Introduction 

In recent years, the issue of security has become ever more 
prevalent in the analysis and design of cyber-physical systems 
(CPSs), namely systems that exhibit a tight conjoining of 
computational resources and physical resources. As argued in 
[1], [2], security in CPSs drastically differs from security in 
general-purpose computing systems since attacks can cause 
disruptions that transcend the cyber realm and affect the 
physical world. In CPSs, attacks to the communication links 
can be classified as either deception attacks or Denial-of- 
Service (DoS) attacks. The former affect the trustworthiness of 
data by manipulating the packets transmitted over the network; 
see [3]-[5] and the references therein. DoS attacks are instead 
primarily intended to affect the timeliness of the information 
exchange, i.e., to cause packet losses; see for instance [6], [7] 
for an introduction to the topic. This paper is concerned with 
DoS attacks. 

In the literature, the problem of securing robustness of CPSs 
against DoS has been investigated by many research groups 
[8]-[13]. In these papers, however, the analysis is restricted to 
a centralized setting, namely to a classical (single-loop) plant- 
controller configuration. On the other hand, no quantitative 
results are available for distributed settings. The purpose of 
this paper is to explore this topic. 

We investigate the issues of DoS with respect to consen¬ 
sus networks. Specifically, inspired by [14], we consider a 
self-triggered consensus network. At each sampling time, a 
certain subset of active agents poll their neighbors obtaining 
relative measurements of the consensus variable of interest: 
the available information is then used by the active agents to 
update their controls and compute their next update times. 
The attacker objective is to prevent consensus by denying 
communication among the agents. Consensus is a prototypical 
problem in distributed settings with a huge range of applica¬ 
tions, spanning from formation and cooperative robotics to 
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surveillance and distributed computing; see for instance [14]- 
[18]. On the other hand, self-triggered coordination turns out to 
be of major interest when consensus has to be achieved in spite 
of possibly severe communication constraints. In this respect, 
a remarkable feature of self-triggered coordination lies in the 
possibility of ensuring consensus properties in the absence of 
any global information on the graph topology and with no 
need to synchronize the agents local clocks. 

A basic question in the analysis of distributed coordination 
in the presence of DoS is concerned with the modeling of DoS 
attacks. In this paper, no assumption is made regarding the 
DoS attack underlying strategy. We consider a general attack 
model that only constrains the attacker action in time by posing 
limitations on the frequency of DoS attacks and their duration. 
This makes it possible to capture many different types of DoS 
attacks, including trivial, periodic, random and protocol-aware 
jamming attacks [ 19]-[22]. One contribution of this paper is an 
explicit characterization of the frequency and duration of DoS 
attacks under which consensus properties can be preserved. 
The result is intuitive as it relates consensus with the ratio 
between the on/off periods of jamming. 

The analysis taken here reminds of stability problems for 
switching systems. More specifically, since DoS generates 
communications failures, the problem is naturally casted as 
a consensus problem for switching topology networks. This 
problem is certainly not new in the literature. For instance, 
[15] shows that agreement can be reached whenever the graph 
connectivity is preserved point-wise in time; [17] suggests a 
Persistency of Excitation (PoE) condition, which stipulates that 
graph connectivity be established over a period of time, rather 
than point-wise in time, which is similar to joint connectivity 
assumption in [16]. In CPSs, however, the situation turns out 
to be drastically different. In fact, one needs to deal with the 
fact that networked communication is inherently digital, which 
means that the rate at which the transmissions are scheduled 
cannot be arbitrarily large. Under such circumstances, the 
aforementioned tools turn out be ineffective. 

In order to cope with this situation, we introduce a notion 
of Persistency of Communication (PoC). This notion naturally 
extends the PoE condition to a digital networked setting 
by requiring that the graph connectivity be established over 
periods of time that are consistent with the constraints imposed 
by the communication medium. A characterization of DoS 
frequency and duration under which consensus properties can 
be preserved is then obtained by exploiting the PoC condition. 

The remainder of this paper is organized as follows. In 
Section II we formulate the control problem along with a 


characterization of the considered class of DoS signals. The 
main results in Section III. A numerical example is given in 
Section IV. Finally, Section V ends the paper with concluding 
remarks. 

Notation. The notation adopted in this paper is in the main 
standard. We denote by R, R>o, R>o the sets of real, positive, 
and nonnegative numbers, respectively. Also, we denote by 
Z>o the set of nonnegative integers. 

II. Problem Formulation 


A. Distributed Control System 

We assume to have a set of nodes I = {1,..., n} represent¬ 
ing our agents and an undirected connected graph G = (/, E) 
with E a set of unordered pairs of nodes, called edges. We 
denote by D and L the Incidence and Laplacian matrix of G, 
respectively, where the latter is a symmetric matrix. For each 
node i £ /, we denote by Mi the set of its neighbors, and by 
di its degree, that is, the cardinality of M,. 

We consider the following hybrid dynamics on a triplet of 71- 
dimensional variables involving the consensus variable x, the 
controls u, and the local clock variables 9. All these variables 
are defined for time t > 0. Controls are assumed to belong to 
{ — 1, 0, +1}. The specific quantizer of choice is sign e : R —» 
{ — 1, 0, +1}, defined according to 


sign e (2) 


sign(z) ii\z\>e 

0 otherwise 


(1) 


where e > 0 is a sensitivity parameter, which can be used 
at the design stage for trading-off frequency of the control 
updates vs. accuracy of the consensus region. 

The system (x, u, 8) G R 3n in the nominal operating mode, 
i.e., in the absence of DoS, satisfies the following continuous 
evolution 

i Xi = Ui 

Ui = 0 (2) 

bi = -1 


except for every t such that the set S(9,t) = {i G I : 9i = 0} 
is non-empty. At such time instants, the system satisfies the 
following discrete evolution 


Xi(t + ) = Xi(t ) Vi € / 

f sign e (ave l (f)) if i G S(9,t) 

\ui(t) otherwise (3) 

fi{x(t)) if i G S(9,t) 

9i(t) otherwise 
where for every i G I the map /j : R” —>• R>o is defined by 
| avei(f)| 


Ui(t+) = 


0i{t + ) = 


fi(x(t)) = 


fdi 

£ 

fdi 


if |avej(f)|>e 
if | avej (t) | < e 


where, for conciseness, we have defined 

avej(f) = ^2 ( xj(t ) - Xi(t)). 


(4) 


(5) 
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Self-triggered coordination algorithms such as 0-©. turn 
out to be of major interest when consensus has to be achieved 
in spite of possibly severe communication constraints. In this 
respect, a remarkable feature of self-triggered coordination 
lies in the possibility of ensuring consensus properties in the 
absence of any global information on the graph topology and 
with no need to synchronize the agents local clocks [14]. 

The result which follows characterizes the convergence 
properties of ©-© in the nominal operating mode, and will 
serve as a basis for the developments of the paper. 

Theorem 1: [14], Given any x G R n , let x(t) be the solution 
to ©-© with i(0) = x. Then x(t) converges in finite time 
to a point x* G R" belonging to the set 

£ = {a; G 1" : | ^ (xj — xi)\ < £ Vi G I}. (6) 

j&Ni 


B. Denial-of-Service 

We shall refer to DoS as the phenomenon by which commu¬ 
nication across the network is not possible. More specifically, 
we assume that the network nodes make use of a shared 
communication medium. Under DoS, none of network nodes 
can send or receive information. This scenario is representative 
of several possible DoS threats. In order to maintain continuity, 
a discussion on this point is deferred to Section II-C. Here, 
we proceed with the DoS modeling and introduce a number 
of assumption on its frequency and duration. 

Let {ft,„}„ e z >0 , where ho> 0, denote the sequence of DoS 
off/on transitions, i.e., the time instants at which DoS exhibits 
a transition from zero (communication is possible) to one 
(communication is interrupted). Then 

H n := {h n }U [h n ,h n + T n [ (7) 

represents the ruth DoS time-interval, of a length T n G R>0, 
over which communication is not possible. Here and in the 
sequel, it is understood that hh+ 1 > h n + r„ for all n G 
Z>o, otherwise H n U 7T„+i could be regarded as a single 
DoS interval. 

Given t , r G R> 0, with t > t, let 

S (G t) := (J H n P| [t , t\ (8) 

n£Z> 0 

represent the sets of time instants where communication is 
denied and 

©(T,f) := \r,t\ \ S(r,f) (9) 

represent the sets of time instants where communication is 
allowed, where \ denote the relative complement and accounts 
for the set of all elements belonging to the time interval [r, t[, 
but not to the set 2(r, t). 

In connection with the definition of the DoS sequence in 
©, the first question to be addressed is that of determining the 
amount of DoS that the network can tolerate before consensus, 
as defined in Theorem 1, is lost. In this respect, it is simple 
to see that such an amount is not arbitrary, and that suitable 





conditions must be imposed on both DoS frequency and 
duration. 

Let us first consider the frequency at which DoS can occur. 
First notice that e/4 di provides a lower bound on the inter¬ 
sampling rate of the i-th node of the network, as imposed 
by the communication medium. Let now A„ = h n +1 — h n , 
with n £ Z>o, denote the time elapsing between any two 
successive DoS triggering. By letting d m i n = min^/ di, one 
immediately sees that if 


An ' A* 


£ 


4 d 


min 


then consensus could be destroyed irrespective of the adopted 
communication strategy. This is because DoS would be al¬ 
lowed to occur at a rate faster than or equal to the sampling 
rate of some network node, which would clearly preclude the 
possibility to achieve consensus. It is intuitively clear that, in 
order to get stability, the frequency at which DoS can occur 
must be sufficiently small compared to sampling rate of the 
network nodes. A natural way to express this requirement is 
via the concept of average dwell-time, as introduced by [23]. 
Given t,r £ M> 0 with t > t, let u(t. t) denote the number 
of DoS off/on transitions occurring on the interval [r, t[. 

Assumption 1 (DoS frequency): There exist rj £ R>o and 
Tf £ M>a„ such that 

n(T,t)<rj+- —— (10) 

T f 

for all t,T £ R>o and t > r. ■ 

In addition to the DoS frequency, one also need to enforce 
constraints on the DoS duration, namely the length of the 
intervals over which communication is interrupted. To see 
this, consider for example a DoS sequence consisting of the 
singleton {/io}. Assumption 1 is clearly satisfied with 77 > 1. 
However, if Hq = R>o (communication is never possible) then 
stability is lost regardless of the adopted control update policy. 
Recalling the definition of the set S in ([ 8 ]), the assumption that 
follows provides a quite natural counterpart of Assumption 1 
with respect to the DoS duration. 

Assumption 2 (DoS Duration): There exist k £ R>o and 
Td £ R>isuch that 

|S(r,f)| < k + -—- (11) 

Td 

for all t,r £ R>o and t > r. ■ 


C. Discussion 

The considered assumptions only constrains the attacker 
action in time by posing limitations on the frequency of 
DoS and its duration. Such a characterization can capture 
many different scenarios, including trivial, periodic, random 
and protocol-aware jamming attacks [19]-[22], For the sake 
of simplicity, we limit out discussion to the case of radio 
frequency (RF) jammers, although similar considerations can 
be made with respect to spoofing-like threats [24]. 

Consider for instance the case of constant jamming. Con¬ 
stant jamming is one of the most common threats that may 


occur in a wireless network [26], [25]. By continuously 
emitting RF signals on the wireless medium, this type of 
jammer can lower the Packet Send Ratio (PSR) for transmitters 
employing carrier sensing as medium access policy as well as 
lower the Packet Delivery Ratio (PDR) by corrupting packets 
at the receiver. In general, the percentage of packet losses 
caused by this type of jammer depends on the Jamming-to- 
Signal Ratio and can be difficult to quantify as it depends, 
among many things, on the type of anti-jamming devices, the 
possibility to adapt the signal strength threshold for carrier 
sensing, and the interference signal power, which may vary 
with time. In fact, there are several provisions that can be 
taken in order to mitigate DoS attacks, including spreading 
techniques, high-pass filtering and encoding [21], [22]. These 
provisions decrease the chance that a DoS attack will be 
successful, and, as such, limit in practice the frequency and 
duration of the time intervals over which communication is 
effectively denied. This is nicely captured by the considered 
assumptions. 

As another example, consider the case of reactive jamming 
[26], [25], By exploiting the knowledge of the 802. li MAC 
layer protocols, a jammer may restrict the RF signal to the 
packet transmissions. The collision period need not be long 
since with many CRC error checks a single bit error can 
corrupt an entire frame. Accordingly, jamming takes the form 
of a (high-power) burst of noise, whose duration is determined 
by the length of the symbols to corrupt [21], [27]. Also 
this case can be nicely accounted for via the considered 
assumptions. 


III. Main Results 
A. Modified Consensus Protocol 

The consensus protocol in (0 needs to be modified in order 
to achieve robustness against DoS. In this respect, for every t 
such that the set S(9,t) = {i £ I : di = 0} is not nonempty, 
the nominal discrete evolution is modified as follows: 


Xi(t + ) = Xi(t) Vi £ I 

sign e (avei(f)) if i £ S(6 , t ) A t £ 0(0, t) 
i{t + ) = 0 if i £ S(9, t) A t £ S(0, t) 

Ui(t) otherwise 

fi(x(t)) if i £ S(8,t) A t £ 0(0, t) 

0i(f + ) — { -if: if i £ S(9,t) At £ 3(0, i) 

9i (t) otherwise 

( 12 ) 

In words, when a network node attempts to communicate 
and communication is denied, the control signal is set to zero 
until the subsequent attempt [j. 

It is worth noting that, although an absolute time variable t 
is used in the description of the system dynamics, the various 


1 It is worth noting that this implicitly requires that the nodes be able to 
detect the DoS status. This is the case, for instance, when jamming causes the 
channel to be busy. Then, transmitters employing carrier sensing as medium 
access policy can detect the DoS status. Another example is when transceivers 
employ TCP acknowledgment. 






nodes implementing the consensus protocol need not to be 
aware of such an absolute time. Instead, they rely on their 
local clocks Oi. As the nodes rely on their local clocks 0, the 
jump times of each variable 9i naturally define a sequence 
of local switching times, which we denote by { 4 }fcgz> 0 - In 
particular, we have 


4+i — 4 + 


/»(*( 4)) 4 e 0 (°4) 


— 4 £ “( 4 1 ) 

4 di 


Vie/. (13) 


The modified algorithm basically consists of a two-mode 
sampling logic, where the sampling times in presence of 
DoS are chosen different, possibly much smaller, than in the 
nominal situation where DoS is absent. As it will become clear 
later on, this is in order to maximize the robustness of the 
consensus protocol against DoS. By ( IT3l >. it is an easy matter 
to see that the sequences of local switching times { 4 }fcez > 0 
satisfy a “dwell time” property since 

A l '■= 4+i — 4 ^ = tj—■ (14) 

^^max 


for every i £ I and k > 0 , where d max = maxigj di. 

For the sake of clarity, the modified consensus protocol is 
summarized below. 


Modified Consensus Protocol (for each i £ I) 

l: initialization: set m( 0 ) £ {— 1 , 0 , + 1 } and 0 *( 0 ) = 0 ; 

2: while 6i(t) > 0 do 

3: i applies the control Uj(t); 

4: end while 

5: if 9i(t) = 0 & t £ 0(0,4 then 
6 : for all j £ Mi do 

7: i polls j and collects the information Xj{t) — Xi{t)\ 

8 : end for 

9: i computes avei(f); 

10 : i computes 9i{t + ) as in (fl 2 l u 

11 : i computes Ui(t + ) as in (fT2l> : 

12 : else 

13: if 9i(t) = 0 & t £ S(0 ,t) then 

14: i set Ui(t + ) = 0; 

15: i set 9i(t + ) = 43 -; 

16 : end if 

17: end if 


We are now in position to characterize the overall network 
behavior in the presence of DoS. In this respect, the analysis 
is subdivided into two main steps: i) we first prove that all the 
network nodes eventually stop to update their local controls; 
and ii) we then provide conditions on the DoS frequency and 
duration such that consensus, in the sense of ([ 6 ]», is preserved. 
This is achieved by resorting to a notion of Persistency-of- 
Communication (PoC), which stipulates that disruptions of the 
graph connectivity cannot exceed a prescribed threshold. For 
convenience the proofs are reported in Section III-B. 

As for ii), the following result holds true. 


Proposition 1: (Convergence of the solutions ) Let x[t) be 
the solution to © and (IT 2 l >. Then, for every initial condition 
ir(0), there exists a finite time T\ such that 1 Lift) = 0 for all 
t > T\ and i £ I. m 

Clearly, the above result does not allows one to conclude 
anything about the final disagreement vector in the sense that 
given a pair of nodes (i,j) the asymptotic value of Xi~Xj can 
be arbitrarily large. In order to recover the same conclusions 
as in Theorem 1, bounds on the parameters t,i and tj in 
Assumption 1 and 2 have to be enforced. 

Consider a sequence {4}fcez > 0 of sampling times, along 
with a DoS sequence {h n } n ^z >0 - Let 

& := < (*, k) £ I x Z > 0 | 4 € (J H n \ (15) 

^ n+Z>0 J 

denote the set of integers related to a control update attempt 
occurring under DoS. Notice that, due to the finite sampling 
rate, a time interval will necessarily elapse from the time 
h n + r n at which DoS ceases, to the time at which the nodes 
successfully sample and transmit. By construction, this interval 
can be upper bounded as 

sup < A* (16) 

{i,k)es? 

Notice now that the last transmission attempt (if any) of 
node i over the n-th DoS interval necessarily falls within 
[h n + r n — -A- ,h n +r n [. This means that the next sampling 
falls by construction within [h n + r n , h n + r„ + -A- [■ Hence, 
we conclude that a DoS free interval of a length greater than 
A* guarantees that all nodes are able to sample and transmit. 
Accordingly, define the following sets that account for the 
DoS-induced actuation delay, 

S(T,f):= (J H v P| [r,f] (17) 

n£Z>o 

0(r,f) := [r,f] \ S(r,f) (18) 

where 

H n := [h n ,h n T T n T A*[ 

By the previous arguments, a sufficient condition under which 
all the network nodes are able to communicate at least once 
within [r, t[ is that 0 (r, t) has positive measure. 

The following result then holds. 

Proposition 2: (Persistency-of-Communication) Let x(t) be 
the solution to © and (fl2l> . Consider any DoS sequence 
satisfying Assumption 1 and 2 with 

f(Tf,T dl A*) := — + — < 1 (19) 

Td Tf 

and i] and n arbitrary. Then, for every r, the set 0(r, t) has 
positive measure for any time t satisfying 

t > T + (k + (1 + 77 )A*) (1 - 4>(Tf,Td, A *))^ 1 (20) 







Combining Proposition 1 and 2, the main result of this paper 
follows at once. 

Theorem 2: Let x(t ) be the solution to (0 and (IT0 . Con¬ 
sider any DoS sequence that satisfies Assumption 1 and 2 with 
Tf and T,i as in ( | 1 9| ) and ?/ and k arbitrary. Then, for every 
initial condition, x(t) converges in finite time to a point x* 
belonging to the set £ as in 0. ■ 

A few remarks are in order. 

Remark 1 : Condition £D3> in Proposition 2 amounts to 
requiring that the DoS signal does not destroy communication 
in a persistent way. This requirement is indeed reminiscent of 
Persistency-of-Excitation (PoE) conditions that are found in 
the literature on consensus under switching topologies, e.g., 
[17]. There are, however, noticeable differences. In the present 
case, the incidence matrix of the graph is a time-varying 
matrix satisfying: i) D(t) = 0 in the presence of DoS; and 
ii) D(t ) = D in the absence of DoS, where D represents the 
incidence matrix related to the nominal graph configuration. 
Consider now a DoS pattern consisting of countable number 
of singletons, namely 5(0, t) = Unez >() {^™}’ with A„ < A*. 
It is trivial to conclude that there exist constant 6 £ R>o and 
a £ R>o such that (cf. [17]) 


/>to~hS 


QD(t)D r (t)Q 1 


'to 


QDD t Q t S > al 


for all to £ R>o, where Q is a suitable projection matrix. 
However, in accordance with the previous discussion, consen¬ 
sus can be destroyed. The subtle, yet important, difference 
is due to the constraint on the frequency of the information 
exchange that is imposed by the network. In this sense, the 
notion of PoC naturally extends the PoE condition to digital 
networked settings by requiring that the graph connectivity be 
established over periods of time that are consistent with the 
constraints imposed by the communication medium. ■ 


B. Convergence Analysis 

This section is devoted to the proof of Proposition 1, 
Proposition 2 and Theorem 2. 

Proof of Proposition 1. Let 

V(x(t)) = ^x T (t)Lx(f) 

where t > 0. Consider the evolution of V (t) along the 
solutions to ©. Following the same steps as in [14], it is 
easy to verify that 

V(x (*))<- ^ | (21) 

i :| avei(t^)|>£ A £^£©(0,i) 

In words, the derivative of V decreases whenever, for some 
node i, two conditions are met: i) |ave,(f^)| > e, which 
means that node i has not reached the consensus set; and ii) 
communication is possible. 

From (|2T1 > we deduce that there must exist a finite time T) 
such that, for every node i and every k with t\ > T), either 
|avei(f^)| < e or t\ £ 5(0, t). This is because, otherwise, 
the function V would become negative contradicting the fact 


that V is non-negative definite since L is the Laplacian graph. 
Thus the proof follows simply by recalling that in both the 
cases \a,vei(t l k )\ < e and t\ £ 5(0, t) the control m is set to 
zero. ■ 

Proof of Proposition 2 By definition of 5 and in view of 
Assumption 1 and 2, the following bounds on 5 is readily 
obtained: 

|H(r,t)| < |S(r, t)\ + (n(r,f) + 1 )A* 

t — T ( t — T \ 

^ n T-b ( p T-T 1 ) A* (22) 

T d V v J 

Finally notice that 

|0(r,f)| =f-r- |5(r,f)| (23) 

Combining the two equations above, one sees that a sufficient 
condition for PoC is that t — r > |S(t, f)|, which, in turn, is 
implied by 

t — T ( t — T \ 

t T > K H-b ( TJ ~\ b 1 ) A* (24) 

Td \ Tf J 

This is equivalent to 

(1 - 4>(Tf,T d , A*) (t - r) > k + (1 + 77 ) A* (25) 

which concludes the proof. ■ 

Proof of Theorem 2. The proof follows immediately by 
combining Proposition 1 and 2. In fact, by Proposition 1, all 
the local controls converge to zero in a finite time. In turn. 
Proposition 2 excludes the possibility that this is due to a 
persistence of the DoS status. This means that converge to the 
set £ is necessarily achieved. ■ 

IV. Numerical Example 

In what follows we see a numerical example of the proposed 
consensus protocol in presence of DoS. A sustained DoS at¬ 
tack with variable period and duty cycle, generated randomly. 
The resulting DoS signal has an average duty cycle of 55%. 

We assume completely connected undirected graph with 
n = 5 nodes. During times over which communication is 
possible each agent is connected to the other agents, namely 
di = n — 1, while in presence of DoS graph becomes edgeless. 
A sample evolution of 0 and (fl2T> starting from the same 
initial condition and on the same graph is depicted in Fig. Q] 
and Fig. 0 Initial conditions are generated randomly between 
0 and 1. The vertical gray stripes in Fig. [I] represent the time- 
intervals over which DoS is active. 

Consistent with the results in [14], [18], system 0,(00 
converges in finite time to values close to average-maxmin- 
consensus, namely 2(mini £,(0) + max^ 2^(0)). Presence of 
DoS bring about latency in coordination of the agents, this is 
due to controls remaining constantly to zero during this period. 
Consensus time in Fig. [I] is almost twice the consensus time 
in Fig. [2] 








Fig. 1. Evolution of state x in m and ED with € = 0.02 (a complete graph 
with n=5 nodes) in presence of DoS with an average duty cycle of ~ 55%. 
The vertical grey stripes represent the time-intervals over which DoS is active. 
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Fig. 2. Evolution of state x in 0 and ED with e = 0.02 (a complete graph 
with n=5 nodes) in absence of DoS. 

V. Conclusion 

We investigated coordination of distributed networked sys¬ 
tems in the presence of DoS attacks. We argued persistency 
of excitation condition is not enough to achieve consensus. 
An explicit characterization of the frequency and duration 
of DoS attacks under prsistency-of-communication is found. 
Condition under which agents can transmit information and 
update their control value frequently enough in sequence of 
time. 

As an additional future research topic, we can compute 
the required consensus time taking into account DoS attack. 
Beside the time cost in [14], this clarifies the consensus time 
gap in presence and absence of DoS. Furthermore, partial 


communication failure can also be investigated separately. This 

problem is motivated by using a point to point communication 

medium. 
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